From 11bebb97a99321fe5e62f590062096424f45ac6c Mon Sep 17 00:00:00 2001
From: Toni Uhlig <matzeton@googlemail.com>
Date: Sun, 12 Jul 2020 21:39:57 +0200
Subject: added -g3 to default CFLAGS and some safe I/O syscalls to prevent
SECCOMP filtering
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
---
src/pseccomp.c | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
(limited to 'src/pseccomp.c')
diff --git a/src/pseccomp.c b/src/pseccomp.c
index 3369940..678cf4d 100644
--- a/src/pseccomp.c
+++ b/src/pseccomp.c
@@ -92,7 +92,8 @@ static const int default_allowed_syscalls[] = {
SCMP_SYS(rt_sigaction), SCMP_SYS(time), SCMP_SYS(nanosleep),
SCMP_SYS(clock_gettime), SCMP_SYS(set_tid_address),
SCMP_SYS(exit), SCMP_SYS(exit_group),
- SCMP_SYS(read), SCMP_SYS(readv), SCMP_SYS(write), SCMP_SYS(writev),
+ SCMP_SYS(read), SCMP_SYS(readv), SCMP_SYS(preadv), SCMP_SYS(preadv2), SCMP_SYS(pread64),
+ SCMP_SYS(write), SCMP_SYS(writev), SCMP_SYS(pwritev), SCMP_SYS(pwritev2), SCMP_SYS(pwrite64),
SCMP_SYS(process_vm_readv), SCMP_SYS(process_vm_writev),
SCMP_SYS(fcntl), SCMP_SYS(fcntl64),
SCMP_SYS(close), SCMP_SYS(wait4),
--
cgit v1.2.3